The Spamhaus XBL is a live database of individual IP addresses of compromised devices.

These devices are sending spam as a result of third party exploits, including open proxies and malware infections.

The Spamhaus extended eXploits Block List (eXBL) is a real-time database of raw and filtered feeds that provides additional information on hijacked IP addresses, including the timestamp of the last connection, the name of the botnet controlling infected nodes, the IP address and port number of the command and control server for some connections, the countries where compromised devices are located and the type of malware used to exploit devices. Spamhaus Technology makes eXBL available to selected security organizations and cyber incident response teams.